Privacy Policy

Information we collect

Account information may include your email address, name, password credentials handled by our authentication provider, and an optional phone number. Community activity may include RSVPs, attendance, teams, match results, league or tournament entries, Suns balances and transactions, reward redemptions, poll and survey responses, chat messages, comments, reactions, and uploaded photos.

We also process notification preferences and subscriptions, and limited technical information such as timestamps, browser requests, IP-derived abuse-prevention identifiers, and server logs needed to secure and operate the service. Rate-limit identifiers are one-way hashed before storage.

How we use it

We use information to create and secure accounts; organize pickup, leagues, and tournaments; calculate results and rewards; deliver requested email or push notifications; moderate community features; prevent fraud and abuse; troubleshoot the service; and respond to support or privacy requests. We do not sell personal information.

Where data lives and who helps us

Supabase provides authentication, database, storage, and realtime services. Vercel hosts the application and produces operational logs. Resend delivers app email. Cloudflare Turnstile helps detect automated form abuse when enabled. Fourthwall operates merchandise checkout and receives information you provide there under its own privacy policy; Sandline sends limited reward-promotion requests when you redeem Suns. Browser push services deliver notifications when you opt in.

These providers may process data in the United States or other locations where they operate. We give providers only the access needed for their service and rely on their contractual and technical safeguards.

Cookies, local storage, and retention

Sandline uses essential session cookies and browser storage for sign-in, PWA behavior, dismissed notices, anonymous poll continuity, and preferences. We retain account and community records while needed to run the club, preserve results and financial/reward audit history, meet legal obligations, resolve disputes, and prevent abuse. Hashed application rate-limit records older than seven days are automatically removed; infrastructure providers may retain security logs under their own schedules.

Your choices and rights

You can update many profile and notification settings in the app. Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, or object to certain processing. California residents may also request information about collection and disclosure. We do not discriminate for exercising a privacy right.

Email hello@sandlinetulsa.com to make a request. We may need to verify that the account belongs to you. Some records may be retained where required for security, legal, or legitimate club recordkeeping purposes.

Security and children

We use access controls, row-level database policies, encrypted connections, server-side validation, abuse controls, and restricted service credentials. No online service can promise absolute security; please use a unique password and contact us if something looks wrong.

Sandline is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child supplied information.

Changes and contact

We may update this policy as Sandline changes. The effective date above will identify the latest version. Questions, security reports, and privacy requests can be sent to hello@sandlinetulsa.com.